Omschrijving
/**
* Disables WordPress Rest API for external requests
* Change whitelist plugins when plugins need to use the REST API
*/
function restrict_rest_api_to_localhost() {
$whitelist = array(‘127.0.0.1’, “::1”);
$whitelistplugins = array(‘contact-form-7’, ‘redirection’);
$request = $_SERVER[‘REQUEST_URI’];
$die = true;
if ($request) {
foreach ($whitelistplugins as $plugin) {
if (!empty(strpos($request, $plugin))) {
$die = false;
}
}
}
if(!in_array($_SERVER[‘REMOTE_ADDR’], $whitelist) && $die){
die(‘REST API is disabled.’);
}
}
add_action( ‘rest_api_init’, ‘restrict_rest_api_to_localhost’, 1 );